Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.mft
File: H5AE6gU4xzwjo9Hf3BIfDmAKzfU.mft (raw, json)
Hash identifier: hkidKYKHiO0wUmvGPF5Ca2Qmd572iFSLpNnR0MY53Og=
Subject key identifier: 7C:31:53:7C:EB:DF:50:8C:40:2D:2D:4A:95:22:7D:45:4F:9D:57:A6
Authority key identifier: 1F:90:04:EA:05:38:C7:3C:23:A3:D1:DF:DC:12:1F:0E:60:0A:CD:F5
Certificate issuer: /CN=1f9004ea0538c73c23a3d1dfdc121f0e600acdf5
Certificate serial: 0196C8724DA8F6F37E52243A0944031CC105
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.mft
Manifest number: 0A3E
Signing time: Tue 13 May 2025 07:00:56 +0000
Manifest this update: Tue 13 May 2025 07:00:56 +0000
Manifest next update: Wed 14 May 2025 07:00:56 +0000
Files and hashes: 1: H5AE6gU4xzwjo9Hf3BIfDmAKzfU.crl (hash: EwN3caIdUEXTnQhIY83LSiWc9vtIjBzUxf5AAcWhyHk=)
2: ntEteGeDZu85wNJOAqgjTrUSx54.roa (hash: Q0TMKcR9tSI7oBt+FGXWaqYBj7j3GPsfDK87Fv5h+YM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 07:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:72:4d:a8:f6:f3:7e:52:24:3a:09:44:03:1c:c1:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f9004ea0538c73c23a3d1dfdc121f0e600acdf5
Validity
Not Before: May 13 07:00:56 2025 GMT
Not After : May 14 07:00:56 2025 GMT
Subject: CN=7c31537cebdf508c402d2d4a95227d454f9d57a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b5:83:7e:ca:4d:04:d3:4f:6a:19:2a:8f:7b:
91:6b:87:e6:c9:6c:36:9e:e2:e3:cb:e1:0d:01:87:
04:81:13:87:d2:b4:1d:dc:1a:d1:76:1b:d7:e4:40:
19:4a:ea:f5:73:ba:c5:32:e8:e5:a2:82:78:ff:84:
b7:ad:11:d9:f0:3e:d4:a4:8d:e1:30:42:8a:6d:af:
ff:ff:e3:1d:86:40:b4:18:33:68:3c:3e:15:79:e6:
83:63:f8:e1:29:f2:cd:c9:9e:6d:c4:fb:ff:74:26:
6f:9c:27:d2:97:e8:b4:6f:51:d5:5f:8f:3b:12:16:
f3:ed:c1:08:b9:07:c0:ba:0d:71:01:d0:0a:dd:c8:
56:75:98:fc:42:04:f4:78:8a:e9:50:a4:b7:1c:e5:
7f:1d:ba:7a:37:34:14:7f:54:0e:48:bf:83:3e:ea:
8d:73:32:69:fa:16:2c:e4:90:a5:e2:4e:c8:4f:7c:
6f:23:a0:5c:8b:38:5d:8e:c2:4d:ac:7b:79:73:cf:
5e:23:3c:44:8b:0a:3c:f8:2b:a8:de:98:1c:9d:85:
31:a5:a5:84:ad:2f:51:60:6f:fe:27:ee:18:09:cb:
b5:fb:1d:26:0d:f7:46:d9:1d:0e:e4:09:51:ed:50:
2c:c9:70:b5:0f:1f:8d:ef:41:10:31:83:ab:66:32:
eb:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:31:53:7C:EB:DF:50:8C:40:2D:2D:4A:95:22:7D:45:4F:9D:57:A6
X509v3 Authority Key Identifier:
keyid:1F:90:04:EA:05:38:C7:3C:23:A3:D1:DF:DC:12:1F:0E:60:0A:CD:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:ae:0b:86:dc:59:5a:ff:aa:ef:32:c8:b2:a3:9f:f3:f6:ce:
35:11:6c:89:07:af:0e:09:5f:5e:7f:c0:74:a9:d1:d6:47:27:
26:40:49:b3:1f:aa:85:01:dd:cc:ea:c9:08:0b:ec:b8:cb:6d:
0d:8d:9f:db:80:9e:b8:b0:9e:99:18:fa:f6:68:fa:a6:57:de:
13:85:7e:b4:cf:31:b7:01:0a:0e:0b:38:48:8d:bd:f5:6c:a6:
c3:95:e7:5f:71:25:9f:c2:39:77:cf:88:22:72:7b:d3:82:ef:
91:fa:49:57:e4:74:f1:af:57:61:c9:0b:3e:93:f4:72:8e:45:
ba:41:65:5b:48:d8:06:78:e0:ea:86:33:54:83:76:1b:da:d4:
b8:16:5e:99:ca:ba:e6:6a:46:8a:e1:da:52:00:8a:ed:b0:ff:
04:3d:34:b4:eb:4b:8f:fc:f5:91:8f:f4:38:a8:40:e5:db:fb:
7c:58:ab:ea:6c:fb:71:5a:17:8b:a3:e9:c3:b9:cc:38:40:d7:
56:15:5e:6c:00:4d:06:b4:71:c1:0b:17:84:30:18:f0:b2:d3:
18:90:10:40:17:b9:cd:85:32:ae:2a:d5:7c:c1:a9:0c:9d:a2:
70:95:24:09:95:fa:90:12:95:a2:ba:4b:39:1e:84:34:f5:d7:
14:12:dd:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 12:42:44 2025 by rpki-client